alibaba / alibaba/weex_js_engine
weex 0.17.0 release有私有目录写漏洞，求问应该如何修复
Open
- Dominant language
- C++
- Stars
- 250
- Forks
- 66
- PR merge metrics
- No merged PRs in 30d
Description
weex生成的/data/data/{pakegeName}/cache/jsserver_crash/jsserver_crash_info.log文件可全局写，请问我应该如何修改该文件的读写权限
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the C++ code that creates or writes /data/data/{packageName}/cache/jsserver_crash/jsserver_crash_info.log and inspect how its permissions are set. The fix is complete when the log is no longer globally writable; verify the resulting file permissions on the affected Weex 0.17.0 environment.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100